Method and system for detecting vulnerabilities of IP multimedia subsystem

Abstract

The invention provides a method and a system for detecting vulnerabilities of an IP multimedia subsystem. The method comprises the following steps of: constructing an anamorphic SIP signaling of the IP multimedia subsystem (IMS), and setting the threat dimension of the anamorphic SIP signaling; setting a detection strategy of the IMS according to user requirements and the anamorphic SIP signaling; selecting the anamorphic SIP signaling and sending the anamorphic SIP signaling to the IMS according to the detection strategy and a test scheme selected by a user; and detecting the network state of the IMS and generating a detection report. By constructing the anamorphic SIP signaling, setting the threat dimension of the anamorphic SIP signaling, establishing the detection strategy according to the user requirements, selecting appropriate anamorphic SIP signaling and sending the anamorphic SIP signaling to the IMS according to the detection strategy and the test scheme selected by the user, and detecting the network state of the IMS after receiving the anamorphic SIP signaling, the method and the system realize vulnerability detection of the IMS, and are helpful for improving the safety of the IMS.

Description

technical field [0001] The invention relates to system safety detection technology, in particular to a method and system for detecting leaks of IP multimedia subsystems. Background technique [0002] The IP Multimedia Subsystem (IP Multimedia Subsystem, IMS) is a subsystem supporting IP multimedia services proposed by the 3rd Generation Partnership Project (3GPP) in the Release 5 standard. The core feature of IMS is based on IP packet network, supports open application programming interface (Application Programming Interface, API), uses Session Initial Protocol (Session Initial Protocol, SIP) as the session control protocol, and Session Description Protocol (Session Description Protocol, SDP) ), as a multimedia session description protocol, realizes the mutual separation of business, call control and bearer, and can shield the difference of access means. IMS is an important way to solve the convergence of mobile network and fixed network, and introduce differentiated servic...

AI Technical Summary

Problems solved by technology

Although the SIP protocol has the characteristics of ease of use, flexibility, and strong scalability, because the SIP protocol is generally transmitted on the IP network in text mode, and the transmission of the SIP protocol uses intermediate devices such as proxy servers and redirection servers, making it There are security risks in the integrity, confidentiality, availability and authenticity of signaling

In addition, in the process of transforming the SIP protocol into products, due to the uneven quality of developers and the lack of maintenance of products developed by the SIP standard for a long time, some security vulnerabilities will be virtually added

Images